Senior Linux Engineer, Privileged Access

Responsibilities • Design, develop, and maintain Linux endpoint privilege management capabilities across Rust, C, and .NET components. • Build kernel-facing agent functionality using fanotify, the proc filesystem, namespaces, capabilities, and process identity interfaces. • Develop and maintain native PAM modules and Linux privilege-elevation workflows. • Build long-running privileged Linux services using Rust, Tokio, MQTT, TLS, and asynchronous programming patterns. • Develop Linux orchestration and session-management capabilities in .NET 8, including process authentication, access controls, ephemeral accounts, and session monitoring. • Diagnose Linux execution and security issues involving blocked processes, authentication races, permissions, SELinux, AppArmor, and system services. • Design privilege-enforcement mechanisms based on least privilege, process trust, and protection against TOCTOU and authorization race conditions. • Build and maintain systemd services, RPM and DEB packages, installation workflows, service hardening, and operational diagnostics. • Collaborate with PAM, endpoint, QA, and platform engineers on architecture, testing, cross-platform functionality, and production troubleshooting. • Use AI-assisted development tools such as Claude, ChatGPT, and GitHub Copilot for research, debugging, development, testing, and documentation. Requirements • 7+ years of professional software or systems engineering experience with significant hands-on Linux systems programming experience. • Deep understanding of Linux processes, security concepts, the proc filesystem, user and group IDs, capabilities, namespaces, and process execution. • Strong C programming experience, including native Linux development, memory management, GCC, Make-based workflows, and defensive error handling. • Experience developing or integrating with Linux PAM and PAM configuration. • Strong Rust experience with ownership, concurrency, asynchronous development, and long-running service or daemon design. • Experience with Tokio or similar asynchronous Rust frameworks. • Working proficiency with C# and .NET in Linux environments. • Experience developing security-sensitive software involving authentication, authorization, privilege elevation, process trust, or least-privilege controls. • Understanding of Linux service management and operations, including systemd, journalctl, SELinux and/or AppArmor, and RPM/DEB packaging. • Experience troubleshooting low-level Linux behavior using logs, process inspection, tracing, and reproducible test tools. • Ability to read Linux kernel and subsystem documentation and translate system behavior into secure production implementations. • Ability and willingness to use AI-assisted tools for systems programming, debugging, technical analysis, testing, and documentation. • Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent practical experience. • Preferred: experience with MQTT or other event-driven messaging technologies. • Preferred: experience with Linux desktop session technologies such as X11, Wayland, GDM, and D-Bus. • Preferred: familiarity with TLS, PKI, code signing, and certificate-based process or plugin authentication. • Preferred: experience supporting RHEL and Ubuntu and understanding SELinux/AppArmor differences. • Preferred: experience with endpoint privilege management, privileged access management, or endpoint security products. • Preferred: familiarity with Avalonia or another cross-platform Linux desktop UI framework. • Preferred: experience building Linux software for x86 and ARM architectures, including packaging and signing pipelines. • Preferred: familiarity with endpoint security architectures on Windows or macOS and authorization models including allow, deny, approval, and just-in-time elevation workflows. Benefits • 100% remote position, with hybrid scheduling available for candidates in the Chicago, Illinois or El Dorado Hills, California metro areas. • Medical, dental, and vision insurance, including domestic partnerships. • Employer-paid life insurance and supplemental life insurance options. • Voluntary short- and long-term disability insurance. • Roth or traditional 401(k). • Generous paid time off, including paid bereavement and jury duty leave. • Above-market annual bonuses.